DG
Vendor
dglingren
17
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103875 New | ML Media Library Assistant dglingren | 4.7 | Oct 29 | Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links |
| CVE-2026-6640 | ML Media Library Assistant dglingren | 6.4 | Sep 11 | Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter |
| CVE-2026-6642 | ML Media Library Assistant dglingren | 6.4 | Sep 11 | Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import |
| CVE-2026-6641 | ML Media Library Assistant dglingren | 6.4 | Sep 11 | Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter |
| CVE-2026-6075 | ML Media Library Assistant dglingren | 8.1 | May 29 | Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form |
| CVE-2026-3072 | ML Media Library Assistant dglingren | 4.3 | Mar 5 | Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification |
| CVE-2025-11738 | ML Media Library Assistant dglingren | 5.3 | Oct 18 | Media Library Assistant <= 3.29 - Unauthenticated Limited File Read |
| CVE-2025-8357 | ML Media Library Assistant dglingren | 4.3 | Aug 19 | Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion |
| CVE-2025-7035 | ML Media Library Assistant dglingren | 5.4 | Jul 16 | Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes |
| CVE-2024-11974 | ML Media Library Assistant dglingren | 6.1 | Jan 4 | Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters |
| CVE-2024-6823 | ML Media Library Assistant dglingren | 8.8 | Aug 13 | Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action |
| CVE-2024-5544 | ML Media Library Assistant dglingren | 6.1 | Jul 2 | Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting |
| CVE-2024-5605 | ML Media Library Assistant dglingren | 8.8 | Jun 20 | Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter |
| CVE-2024-3518 | ML Media Library Assistant dglingren | 6.5 | May 21 | Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode |
| CVE-2024-3519 | ML Media Library Assistant dglingren | 6.1 | May 21 | Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang |
| CVE-2024-2871 | ML Media Library Assistant dglingren | 7.7 | Apr 9 | Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode |
| CVE-2024-2475 | ML Media Library Assistant dglingren | 5.4 | Mar 29 | Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode |